Luck 31 Privacy Policy — How We Protect Your Data

1. Who We Are

Luck 31 operates the online casino and sports betting platform available at luck31.net. When this policy refers to "Luck 31", "we", "us", or "our", it means the Luck 31 platform and its operating team responsible for managing the services offered to Pakistani players.

Luck 31 is the data controller for the personal information collected through this platform. That means we are the party responsible for deciding what data is collected, why it is collected, and how it is processed. If you have questions or concerns about how your data is being handled, we are the right point of contact.

Our primary contact for data and privacy matters is: support@luck31.net

2. What Data We Collect

Luck 31 collects personal data in two broad ways: information you provide directly, and information that is generated automatically through your use of the platform.

2.1 Information You Provide Directly

• Registration details: Your Pakistani mobile number and the password you create when opening a Luck 31 account. These form your primary account identity.
• Identity verification (KYC) documents: Where Luck 31 requests verification — for example before processing a large withdrawal — you may be asked to provide a copy of your CNIC (Computerised National Identity Card) or other government-issued identification. This data is collected only when required and handled with heightened security.
• Payment information: Details necessary to process deposits and withdrawals, including your Easypaisa account number, JazzCash number, NayaPay or SadaPay account, bank account details for IBFT, or masked card details for Visa and Mastercard transactions. Luck 31 does not store full card numbers — card processing is handled by PCI-compliant third-party payment processors.
• Support communications: When you contact the Luck 31 support team via email, the content of your messages and any attachments you send are retained as part of your support history.

2.2 Information Generated Automatically

• Gaming and betting history: Every bet placed, game session played, and wager result is recorded and linked to your account. This includes stake amounts, game types, session duration, and outcome data.
• Transaction records: A complete log of all deposits, withdrawals, bonus credits, and balance adjustments on your Luck 31 wallet.
• Device and session data: IP address at time of login, device type (mobile or desktop), operating system, browser type, and approximate geographic location inferred from IP. This data is used for security, fraud prevention, and platform optimisation.
• Cookies and tracking data: As described in Section 7, Luck 31 uses cookies and similar technologies to manage sessions, remember preferences, and analyse platform usage.

3. How We Use Your Data

Luck 31 uses the data we collect for specific, legitimate purposes. We do not use your data for purposes beyond those listed below without either your consent or a valid legal basis:

4. Legal Basis for Processing

Luck 31 processes your personal data under one or more of the following legal grounds:

• Contractual necessity: Processing your data to fulfil the obligations set out in the Luck 31 Terms and Conditions — including running your account, processing transactions, and managing bonuses. Without this processing, we cannot provide the service you registered for.
• Legitimate interests: Using device data, session logs, and gaming patterns for fraud prevention, security monitoring, and platform improvement. These interests do not override your rights and we take care to use the minimum data necessary for each purpose.
• Legal obligation: Retaining transaction records and KYC documents to comply with applicable anti-money laundering requirements and any lawful requests from Pakistani regulatory authorities.
• Consent: Sending marketing communications to your registered mobile number — which you can withdraw at any time as described in Section 11.

5. Who We Share Your Data With

Luck 31 does not sell your personal data to third parties. We share data only where necessary to deliver our services or meet legal obligations:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT partners, and Visa/Mastercard processing providers receive only the transaction data required to execute your deposit or withdrawal. These providers operate under their own privacy policies and are bound by standard data processing agreements.
• Identity verification services: Where KYC is required, identity documents may be shared with a third-party verification provider for automated or manual review. All such providers are bound by confidentiality agreements with Luck 31.
• Fraud and security services: Aggregated device and session data may be shared with fraud detection service providers to identify and block suspicious activity. These providers do not receive personally identifiable information beyond what is necessary for the specific check.
• Regulatory and law enforcement authorities: Where required by Pakistani law or a valid legal process, Luck 31 will disclose relevant account and transaction data to authorised government bodies. We will notify you of such disclosures where legally permitted to do so.
• Technology service providers: Cloud hosting, database management, and customer support software providers may have access to data as part of delivering infrastructure services to Luck 31. These providers are contractually obligated to process data only on our instructions.

6. Data Retention

Luck 31 retains your personal data for as long as necessary to fulfil the purposes described in this policy, subject to the following standard retention periods:

• Active account data (mobile number, gaming history, wallet transactions): Retained for the lifetime of your account plus 5 years after account closure, to meet financial record-keeping obligations.
• KYC documents (CNIC copies, identity verification records): Retained for 5 years from the date of verification or account closure, whichever is later, in line with standard anti-money laundering record requirements.
• Support communications: Retained for 2 years from the date of the interaction, unless an ongoing dispute requires longer retention.
• Marketing consent records: Retained for as long as your account is active and for 2 years after your last opt-out action, to demonstrate compliance with consent obligations.
• Anonymised analytics data: Aggregated, non-identifiable usage statistics may be retained indefinitely for platform improvement purposes.

After the applicable retention period expires, Luck 31 will securely delete or anonymise your personal data. Where deletion is technically complex, data will be isolated from active processing until full deletion is completed.

7. Cookies & Tracking Technologies

Luck 31 uses cookies and similar browser-based technologies to operate the platform, remember your preferences, and analyse usage patterns. Here is what each category does:

• Essential cookies: Required for the platform to function. These manage your login session so you stay logged in during your visit, handle your language and display preferences, and maintain your live casino game connection. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Collect anonymised information about how players navigate the platform — which games are loaded most often, where errors occur, how long pages take to load. This data helps us improve stability and speed for all players, including those on slower connections in Pakistan.
• Functional cookies: Remember choices you have made, such as which game lobby view you prefer or your last visited game category, so you do not have to reset preferences every time you visit.
• Security cookies: Help identify unusual login patterns, detect potential bot activity, and flag accounts that may have been compromised. These are a core part of our fraud prevention system.

8. Data Security

Luck 31 implements technical and organisational security measures designed to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security practices include:

• Encrypted data transmission: All data transmitted between your device and the Luck 31 platform is encrypted using industry-standard TLS (Transport Layer Security). The padlock icon in your browser confirms this connection is secure.
• Password hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hash function, meaning even Luck 31 staff cannot read your password.
• Access controls: Internal access to player data is restricted on a need-to-know basis. Only team members who need specific data to perform their job — such as support staff resolving a dispute — can access it, and all access is logged.
• Payment security: Full payment card numbers are never stored by Luck 31. Card transactions are processed by PCI DSS-compliant third-party processors who specialise in payment security.
• Regular security reviews: Our platform infrastructure is reviewed periodically for vulnerabilities. Identified issues are prioritised and addressed according to their severity.

No online platform can guarantee absolute security. If Luck 31 becomes aware of a data breach that is likely to affect your rights, we will notify affected players as soon as reasonably practicable and take immediate steps to contain and investigate the incident.

9. Your Rights Over Your Data

As a Luck 31 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@luck31.net. We aim to respond within 30 days.

10. Children's Privacy

Luck 31 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. Our registration process asks players to confirm their age, and any account identified as belonging to a minor will be immediately closed.

If you are a parent or guardian and believe a minor in your household has registered a Luck 31 account or made a deposit, please contact support@luck31.net immediately. We will investigate the matter urgently, close the account, and arrange a full refund of any deposits made by the minor. We take underage access very seriously.

We also recommend that parents and guardians use parental control software on shared devices to prevent minors from accessing online gambling platforms.

11. Marketing Communications

Luck 31 may send you promotional messages via SMS to your registered mobile number, including information about new bonuses, promotions, game launches, and special events. We only send these messages where we have a legitimate basis to do so — either because you have opted in or because you are an existing player and the message relates to services similar to those you use.

You can opt out of marketing communications at any time by:

• Replying STOP to any SMS from Luck 31
• Emailing support@luck31.net with your mobile number and a request to unsubscribe
• Updating your notification preferences in your Luck 31 account settings

Once we receive your opt-out request, we will stop sending marketing messages within 5 working days. Note that opting out of marketing does not stop transactional messages — for example, withdrawal confirmation messages or security alerts will still be sent as they are part of the core account service.

12. Changes to This Privacy Policy

Luck 31 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable regulations, or the services we offer. When material changes are made, we will notify registered players via SMS to their registered mobile number at least 7 days before the updated policy takes effect.

The date at the top of this page will always reflect when the policy was last updated. We recommend reviewing this page periodically. Continuing to use the Luck 31 platform after an updated policy takes effect constitutes your acceptance of the changes.

If you do not accept a material change to this policy, you may close your account before the effective date by contacting support. Any balance in your account at the time of closure will be processed for withdrawal subject to applicable verification requirements.

13. Contact & Complaints

If you have questions about this Privacy Policy, want to exercise any of your data rights, or want to raise a complaint about how Luck 31 has handled your personal data, please contact us:

• Email: support@luck31.net
• Response time: We aim to respond to all privacy-related enquiries within 5 working days. Complex requests involving data access or deletion may take up to 30 days.

If you are unhappy with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in Pakistan. We will cooperate fully with any such investigation and will not take any action against players who exercise their rights in good faith.